Extracted

• • Target
    SecuriteInfo.com.Trojan.MSIL.FormBook.EUH.MTB.7406.29527
  • Size 1.7MB
  • SHA256 f87199abf8debc5baac65e166998ca8831bc93a916d2f8a56bb947623892c87e
  • MD5 c0bf43eb40ff245d10eb1569c48a364a
  • SHA1 7c366ae629f44da6f9cd0728d173f7b9a8dbc146
  • SHA512 1aaaf7ac120a8857c5b394a71863ba3af3620c166e03bd9df3e99f3d13720b2ffb9bf2d8c801f143c19b0840b84a5c6cb735621fcbe170d1c59dc98fd48a50cb
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1

    suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1

    suricata

  • suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2

    suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2

    suricata

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot Fake 404 Response

    suricata: ET MALWARE LokiBot Fake 404 Response

    suricata

  • suricata: ET MALWARE LokiBot Request for C2 Commands Detected M1

    suricata: ET MALWARE LokiBot Request for C2 Commands Detected M1

    suricata

  • suricata: ET MALWARE LokiBot Request for C2 Commands Detected M2

    suricata: ET MALWARE LokiBot Request for C2 Commands Detected M2

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2